Vulnerabilities in n/a
161,276 resultsCVE-2011-0719—Samba 3.x before 3.3.15, 3.4.x before 3.4.12, and 3.5.x before 3.5.7 does not perform range checks for file descriptors before use of the FDEPSS 4.6%CVE-2007-0619—chmlib before 0.39 allows user-assisted remote attackers to execute arbitrary code via a crafted page block length in a CHM file, which trigEPSS 4.6%CVE-2012-1937—Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thunderbird EPSS 4.6%CVE-2011-2696—Integer overflow in libsndfile before 1.0.25 allows remote attackers to cause a denial of service (application crash) or possibly execute arEPSS 4.6%CVE-2011-1684—Heap-based buffer overflow in the MP4_ReadBox_skcr function in libmp4.c in the MP4 demultiplexer in VideoLAN VLC media player 1.x before 1.1EPSS 4.6%CVE-2015-5457—PivotX before 2.3.11 does not validate the new file extension when renaming a file with multiple extensions, which allows remote attackers tEPSS 4.6%CVE-2007-5746—Integer overflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary coEPSS 4.6%CVE-2021-42128—An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 using inforail Service allows Privilege Escalation via EEPSS 4.6%CVE-2008-3640—Integer overflow in the WriteProlog function in texttops in CUPS before 1.3.9 allows remote attackers to execute arbitrary code via a crafteEPSS 4.6%CVE-2011-2732—CRLF injection vulnerability in the logout functionality in VMware SpringSource Spring Security before 2.0.7 and 3.0.x before 3.0.6 allows rEPSS 4.6%CVE-2024-33752MEDIUMAn arbitrary file upload vulnerability exists in emlog pro 2.3.0 and pro 2.3.2 at admin/views/plugin.php that could be exploited by a remoteEPSS 4.6%CVE-2014-9180—Open redirect vulnerability in go.php in Eleanor CMS allows remote attackers to redirect users to arbitrary web sites and conduct phishing aEPSS 4.6%CVE-2007-4489—Buffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP Client module allows remote attackers to executeEPSS 4.6%CVE-2012-0642—Integer underflow in Apple iOS before 5.1 allows remote attackers to execute arbitrary code or cause a denial of service (device crash) via EPSS 4.6%CVE-2011-2991—The browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products does not prEPSS 4.6%CVE-2011-2989—The browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products does not prEPSS 4.6%CVE-2015-4450—Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and AcrobEPSS 4.6%CVE-2014-8450—Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and AcrobEPSS 4.6%CVE-2015-4449—Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and AcrobEPSS 4.6%CVE-2015-5092—Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.006.30060, and AcrobEPSS 4.6%